Insecure Permissions in Simple Contacts Pro by Simple Mobile Tools
CVE-2026-107015

9.1CRITICAL

Key Information:

Vendor

Simple Mobile Tools

Status
Simple Contacts Pro
Vendor
CVE Published:
29 October 2026

What is CVE-2026-107015?

The Simple Contacts Pro application by Simple Mobile Tools is impacted by insecure permissions that allow unauthorized attackers to read and write notes in another user's note database. This vulnerability can lead to sensitive information exposure, compromising user privacy and data integrity. Users of affected versions should promptly update to the latest version to mitigate risks associated with this security flaw.

References

https://github.com/SimpleMobileTools/Simple-Contacts
https://github.com/kanytu/Simple-Contacts/issues/628
https://github.com/FFG0d/fdroid-android-advisories/blob/m...

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.